Workshop on RPKI: Tutorial and Deployment Strategies for
Secure Internet Routing

July 26 - 27, 2013, Berlin, Germany



The current Internet backbone is quite vulnerable against threats. Intended attacks as well as misconfigurations lead to disturbances on the BGP layer. Prominent examples include hijacking of YouTube's IP prefix, and incorrect redirection of 15% of the US Internet traffic to China Telecom in April 2010.

Current efforts of the Secure-Inter Domain (SIDR) working group within the IETF lie in the standardization of protocols to enhance the security of BGP, taking practical deployability into consideration. They focus on solving two problems: enable a router (a) to verify that a BGP update did originate at an authorized AS and (b) to verify that the AS path within the BGP update corresponds to the route traversed. Even though path validation is far from global deployment, deployment of the solution for prefix origin validation is growing.

To promote a more robust Internet backbone, we offer two events. You can participate in either or both.

Half-Day Event: RPKI Tutorial

This tutorial is designed for operators of autonomous systems. We give background about state of the art protection mechanisms against prefix hijacking. The course is complemented by hands-on experiments, where you get experiences of how to protect IP prefixes. After this tutorial you should be able to enable prefix origin validation in your network. We will have an English and German speaking tutorial.

Full-Day Event: RPKI Deployment Strategies

The aim of this workshop is to bring together Internet operators, policy makers, engineers, and researchers to discuss speed-up of RPKI deployment. We aim to identify both technical open problems as well as business concerns, which prevent global RPKI deployment. The workshop will consist of short talks and detailed discussions.


Workshop Registration
The RPKI Tutorial and RPKI Deployment Strategies are free of charge but the organizers only provide the facility and no catering support. However, we kindly ask you to register to support us in better room planning.

You can register separately for both events:

Saturday Social - IETF Warm-Up! BBQ@FU Berlin

The IETF Warm-Up is a casual social to meet colleagues and friends working on the Internet. You are cordially invited to join. The BBQ is sponsored by BCIX.

Please follow the registration on

Although the RPKI workshop and the social are attached to the IETF#87 meeting in Berlin there is no requirement to register for the IETF meeting.


July 26, 2013: RPKI Tutorial (Half-Day)
Instructors: Randy Bush, Matthias Wählisch

Please bring your laptop for the hands-on part.
12:00 - 13:00 Introduction RPKI
13:00 - 14:00 Basic Tools, Hands-on Cache Server
14:00 - 14:30 Break
14:30 - 16:30 Hands-on Prefix Origin Validation
16:30 - 17:00 Break
17:30 - 18:30 Hands-on experiments & Wrap-up
19:00 Group Dinner together with SIIS Workshop.
This is not sponsored ;), you pay on your own.

July 27, 2013: RPKI Deployment Strategies (Full-Day)
10:00 Welcome/Intro
Round of Introduction
Monitoring RPKI Origin Validation
RPKI and Route Origin Validation Deployment Practices
Discussion on Gap Analysis
19:00 IETF Warm-Up! BBQ@Freie Universität Berlin.
Sponsored by BCIX. Separate registration required.

Meeting Venue

The RPKI Workshop and the IETF Warm-Up (social at Saturday) will take place at Freie Universität Berlin at the Institute of Computer Science. The official address of the institute is Takustr. 9, 14195 Berlin, Germany.

Building/Room Number

Computer Science Main Building. Room 053 (Tutorial), Room 049 (Deployment Strategies)

General Directions to Freie Universität Berlin

You find detailed directions from airports and main train stations to the venue at

Traveling Between IETF Venue and Freie Universität Berlin

Traveling from the IETF venue to the Freie Universität Berlin takes about 30 minutes. It includes one metro ride.

From the Hotel InterContinental walk to metro station Wittenbergplatz and take the metro line U3 towards Krumme Lanke. Get off at station Dahlem Dorf and walk to the venue.

You find more details in the Google map.

Workshop Organizers

  • Randy Bush (IIJ)
  • Markus de Brün (BSI)
  • Thorsten Dietrich (BSI)
  • Thomas Schmidt (HAW Hamburg)
  • Rüdiger Volk (Deutsche Telekom AG)
  • Matthias Wählisch (Freie Universität Berlin)



In case of questions feel free to contact Matthias Wählisch.